:

Incident Investigation & Response:

- Perform in-depth analysis of escalated alerts from CrowdStrike SIEM & EDR, identifying root causes and true impact.
- Execute containment and remediation actions for malware, ransomware, and unauthorized access.

Endpoint & Policy Management:

- Administer Microsoft Intune for device enrollment, health monitoring, and security baseline enforcement.
- Manage and tune CrowdStrike protection policies, including exclusions and sensor health.

Data Protection & Compliance:

- Configure and optimize Microsoft Purview DLP policies across Endpoints, Exchange, SharePoint, and Teams.
- Manage Purview sensitivity labels and information governance to safeguard PII and sensitive assets.

SOC Engineering

- Fine-tune SIEM correlation rules and dashboards to reduce false positives and improve detection fidelity.




- Develop and maintain incident response playbooks and operational documentation.

Technical Skills

Tools: Advanced SIEM (Splunk/Sentinel), EDR (CrowdStrike/Defender), and Forensics (FTK/Volatility).

Deep Forensics: Perform log, malware, and network traffic analysis (PCAP/EDR).

Analysis: Static/Agile malware analysis and root cause investigation.

Threat Hunting: Conduct proactive hunts to identify hidden IOCs and TTPs.

Scripting: Automation via Python, PowerShell, or Bash.

Frameworks: Mastery of NIST IR lifecycle and MITRE ATT&CK.;

Acceptance Criteria

Work Mode: 100% Work from Office (WFO)

Schedule: Rotational shifts and rotational weekly offs.

Experience: Minimum 4+ years in dedicated SOC/IR roles.

📌 Cybersecurity Engineer (Chennai)
🏢 TalentOla
📍 Chennai